.npmrc

# Turn an out-of-range engines.node into a hard install/run error instead of an easy-to-miss warning.
# Without this, npm only *warns* on a Node-version mismatch -- which is exactly how the Node 26 jsdom
# localStorage gap (nodejs/node#60303) went unnoticed until someone happened to run tests on Node 26
# locally (#7592/#7597, then apps/loopover-ui + packages/loopover-ui-kit). CI itself was never at risk
# (.github/actions/setup-workspace pins node-version-file: .nvmrc), so this only guards local installs.
# CI additionally neutralizes any repo-provided .npmrc before installing (same action, "Neutralize
# untrusted npm config" step) as a defense against a malicious fork PR's .npmrc, so this file has no
# effect there either way -- it is a local-development guard only.
engine-strict=true